No quantum advantage for nonlocal computation 
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We investigate the problem of "nonlocal" computation, in which separated parties must compute 
a function with nonlocally encoded inputs and output, such that each party individually learns 
nothing, yet together they compute the correct function output. We show that the best that can 
be done classically is a trivial linear approximation. Surprisingly, we also show that quantum 
entanglement provides no advantage over the classical case. On the other hand, generalized (i.e. 
super-quantum) nonlocal correlations allow perfect nonlocal computation. This gives new insights 
into the nature of quantum nonlocality and its relationship to generalised nonlocal correlations. 



In 1964, John Bell Q proved that quantum theory 
can generate correlations unachievable by any local clas- 
sical means. These nonlocal correlations cannot be used 
to transmit information, but arc nevertheless useful for 
manyinformation-theoretic tasks, including cryptogra- 
phy 0| , dense-coding Q , quantum teleportation £| , and 
reducing communication complexity 0, Identifying 
those tasks which can benefit from the use of quantum 
nonlocality, and those which can not, is crucial to as- 
sessing and understanding fully the power of quantum 
information processing. 

Here, we report an unexpected limitation of quantum 
correlations by exhibiting a large class of nonlocal tasks 
for which quantum resources are of no benefit at all over 
local classical strategies, even though the perfect exe- 
cution of the task would not violate the non-signalling 
principle. These tasks can be described in a unified way 
as the nonlocal computation of Boolean functions. 

Following [lflj . in which the problems of 'nonlocal 
equality' and 'nonlocal majority' are considered, we de- 
fine the nonlocal computation of a general Boolean func- 
tion / as follows. 

Consider a Boolean function / from n bits 
{z\, z 2 , z n } to a single bit: 

c = f(z 1 ,z 2 ,...,z n ). (1) 

We now distribute each input bit to two parties, Alice and 
Bob, so that neither party individually learns anything 
about the global input [l6(. For each input bit, Alice is 
given a bit Xi, and Bob a bit j/,*, such that their XOR is 
equal to Zi (zi — Xi®yi). However, individually Xi and yi 
are totally random, being with equal probability or 1. 
To successfully perform the nonlocal computation, Alice 
must produce an output bit a and Bob an output bit 
b (without communicating with each other), such that 
c = a® b. i.e. 

a© b = f(xi © yi,x 2 © 2/2, —,x n © y n ). (2) 

The task we consider in this letter is for Alice and Bob 
to maximize the probability of success of their nonlocal 
computation, given some prior distribution on the inputs 



Zi (for example the prior distribution could be for each 
Zi to be or 1 with equal probability) and either (a) 
quantum resources, (b) classical resources alone, or (c) 
generalised non-signalling resources. 

Surprisingly, we find that quantum resources provide 
no advantage over classical resources for nonlocal com- 
putation. In fact both are very ineffective - the best 
they can do is just a trivial linear approximation of the 
computation. Since non-linearity is the essential element 
of computation, we could say that nonlocal computation 
is impossible in classical and quantum theory. This is 
particularly surprising because generalised non-signalling 
correlations 0, Il0| (including "super-quantum" correla- 
tions which violate Bell inequalities by more than quan- 
tum theory) would allow perfect success in any nonlocal 
computation. This shows that nonlocal correlations in 
general are helpful in such tasks, and that our results 
indicate a characterising feature of quantum nonlocality. 

At the end of the Letter we generalize the situation to 
more parties and to more general nonlocal tasks. 

Nonlocal computation with quantum resources. 

Consider the nonlocal computation of a general Boolean 
function / as above, given quantum resources. To sim- 
plify the notation, we denote the inputs by bit-strings 
x = xix 2 ...x n , y = y±y 2 ...y n and z = ziz 2 ...z n , and 
the bitwise-XOR by ©. The nonlocal computation of 
c = f(z) can then be written as 

a(Bb = f{x(By). (3) 

Let us suppose that the inputs z are given according 
to an arbitrary probability distribution P(z) According 
to the above definition, to ensure that Alice or Bob alone 
have no individual knowledge of z, it is necessary to take 
all inputs x and y satisfying z — x © y with equal prob- 
ability. This means that each party individually has a 
maximally random bit-string, with the joint probability 
distribution for their inputs given by 

P{x,y) = ^P(x®y). (4) 

The average success probability for Alice and Bob to sat- 
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isfy eq. ® is therefore given in terms of the success prob- 
ability for given inputs, P(a ®b = f(x © y)\xy), by 



= 4 E^ ® y^ a ® b = f( x ® y)\*y) 



(5) 



In the most general quantum protocol, Alice and Bob 
share an entangled quantum state and perform pro- 
jective measurements on their subsystem dependant on 
their inputs, given by Hermitian operators a x and b y re- 
spectively, with eigenvalues and 1. They then output 
their measurement results. Note that protocols involving 
initially mixed states or POVM measurements can all be 
represented in this form by expanding the dimensionality 
of the initial state. In this quantum case, 

P(a®b = f(x®y)\xy) = ^(l + (^\(-l) fix ® y)+ ^ +i y\iP)^ 

(6) 

Hence the total probability of success is given by 

pqU) = \ + E^ © y) M(-i) /(xej/)+a * +s * m ■ 

xy 

(7) 

To further analyze Pgif), we note that we can re-express 
it mathematically in terms of a single scalar product in a 
larger Hilbert space (Note that this does not correspond 
to any physical change, but is merely intended to aid in 
the analysis). Extending the Hilbert space from Ti to 
TL ® C 2 , we define normalised states \a) and |/3) and a 
Hermitian operator $ as follows: 



|a> = J=£(-l)^l 



\x), 



^(-l) s ^l|V>®|y> 



$ = J2(- 1 ) f(x(Bv)p (x®y) 



(8) 
(9) 
(10) 



where \x) and \y) are computational basis states in C 2 
Eq. J2J can then be re-expressed in the simple form 



PqU) 



from which it follows that 



t® $|/3)), 



(11) 



(12) 

where 1 1 <E> 1 1 is the operator norm of <3E> (the largest modulus 
eigenvalue) . 

To investigate the eigenstates and eigenvalues of we 
first rewrite it in the Fourier-transform basis: 



-7= Vf-l)" 31 



(13) 



where u.x is the inner product modulo 2 of the bit strings 
u and x. This gives 

$= ^|uXu|W^|i3Xfi|) 

= 4 j2(~ i ) f{xey)+u - x+v - y p^ © v) \m 



= 4 E f(-i) /(z)+u - z ^)) ((-i) (u+i '^) itiXtJi 



(14) 



uvyz 
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where in the second line we have replaced the sum over x 
by one over z — x®y. The eigenstates of $ are therefore 
\u), and inserting the modulus of the largest eigenvalue 
in 112|) we obtain the quantum bound 



Pq(/)< - I 1 + max 



j2{-i) fiz)+u - z p{z) 



(15) 



Nonlocal computation with classical resources. 

We now consider the optimal classical strategy for per- 
forming the distributed computation of /. Without loss 
of generality we restrict our analysis to deterministic 
strategies, as the success probabilities for random strate- 
gies will simply be a convex combination of these. 

To analyse a general deterministic strategy, we simply 
replace the operators a x and b y above with numbers a x 
and by which represent the outputs given by Alice and 
Bob for different inputs. The analogues of eqns. (JHJ, © 
and 1)11(1 for the classical success probability are then 



K) 

\Pc) 



^E(-^i-)' 

X 

^Em) 6 ^ 
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Pc(f) = -(1 + K|$|/3 C )) 
By choosing the classical strategy 

a x = u.x © 5, by = u.y, 

where 

fl if £ 2 (-l) /(2)+u - z P(z) < 0, 
[ otherwise, 

we obtain 



(16) 
(17) 
(18) 

(19) 
(20) 



Pc(J) 



\ Y / (- 1 ) nxBv)+u - x+u - v+s p( x © yyj 

\ xy ) 



\f{z)+u.z 



(21) 
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and with the appropriate choice of u we can therefore 
reach the quantum bound given by l|15|l . Hence we have 
proved that quantum theory provides no advantage over 
the best classical strategy for the distributed computa- 
tion of /. Moreover, the solution described in l|19l) and 
(|20[l is simply the best linear approximation of f{z). 

Nonlocal computation using generalized non- 
signalling correlations. In Popescu and Rohrlich 
asked whether or not quantum mechanics is uniquely de- 
termined by the existence of nonlocal correlations that 
are consistent with relativity (i.e. that do not allow sig- 
nalling). Surprisingly they found that the class of possi- 
ble non-signalling correlations is larger than the quantum 
mechanical one. The question then arises whether or not 
such correlations exist in nature and if not, why not. A 
great deal of research has been undertaken recently into 
such generalised non-signalling correlations 0, 0] 
with the aim of better characterizing the differences be- 
tween them and quantum correlations. 

It is interesting to speculate whether it would be pos- 
sible to beat the quantum bound for nonlocal compu- 
tation using such generalised non-signalling correlations. 
The answer is, quite trivially, yes. Indeed, all that we 
require from the correlations is that they yield both pos- 
sible sets of outputs fulfilling with equal probability 
(e.g. a = b = [50%] a = 1, 6=1 [50%] when 
f(x © y) = Q). Each party individually will then obtain 
a random bit and learn nothing about the other party's 
input. Such a correlation is therefore non-signalling and 
fulfils J3J) perfectly, giving max Pc(f) — 1. (Here the 
index G stands for "generalized correlations" .) 

Incidentally, it is also easy to see that (except in the 
case when / is constant) for any generalized correlation 
that fulfils J2J perfectly, the local bits a and b have to be 
uniformly random to ensure non-signalling. 

Example: Nonlocal computation of AND. Prob- 
ably the simplest non-trivial case is that of the AND 
function 

AND(zi,z 2 ) = z x z 2 . (22) 

The nonlocally distributed version of the AND function 
is given by [13j 

a© 6 = (zi©yi)(x 2 ©2/2), (23) 

where x\ and x 2 are Alice's input bits, y\ and y 2 are Bob's 
input bits, and a and b are Alice and Bob's respective 
output bits. 

When the different values of the input bits z\ and Zi 
are given with uniform probability (P(z) — j), it is easy 
to show from l|15Jl that 

P™ ax (AND) = P£ iax (AND) = | < Pg iax (AND) = 1. 

A simple classical strategy that achieves this bound 
is for Alice and Bob to both give the output zero in all 



cases (u = S = 0). This strategy will only fail when 
x\ © y\ = X2 © y2 — 1, which corresponds to 1/4 of the 
possible inputs, thus we obtain maxPp(AND) = 3/4. 

Note the distinction between the nonlocal computa- 
tion given by l|23|l and the distributed computation rep- 
resented by 

a© b =x x y\. (24) 
for which it can be shown that 

pmax ^ pmax 2 © \/2 nmax i 

r c — 4 Q - I <r G - J- 

The classical and quantum bounds in this case cor- 
respond to the Clauser-Horne-Shimony-Holt and 
Tsirelson |8j bounds respectively, and the generalised cor- 
relations satisfying l|24|l are commonly referred to as a 
PR-box HE3- Note that ^ does not correspond to 
the nonlocal computation of any f(z). 

It is possible to simulate nonlocal-AND perfectly us- 
ing two PR-boxes and local operations 13]. Interest- 
ingly, when the PR-boxes are made increasingly noisy, 
they yield a success probability of P(AND)=3/4, pre- 
cisely when the noisy correlations would be attainable in 
quantum theory 

Discussion. The nonlocal version of some functions can 
be computed perfectly with a local classical strategy (e.g. 
nonlocal-NOT can be implemented with u = 6 = 1); in 
fact, it is precisely the affine linear functions (modulo 2) 
that can be implemented perfectly. For all other cases, 

p--(/) = p--(/) < P«-(/) = l. (25) 

Quantum entanglement therefore offers no benefit over 
a local classical strategy for the nonlocal computation 
of Boolean functions. By contrast, generalised non- 
signalling correlations would allow perfect success in any 
such task. An interesting question is whether all super- 
quantum correlations are helpful in computing some dis- 
tributed function. If this were indeed the case, we would 
obtain a powerful and intuitive characterisation of quan- 
tum nonlocality. 

Note that in the definition of success probability above 
we assumed a fixed prior distribution P. One could 
equally well ask for the maximum success probability in 
the worst case (i.e. when each strategy is evaluated using 
its worst z) . Fortunately the minimax theorem of game 
theory tells us that in the classical case, when Al- 
ice and Bob can use shared randomness to access mixed 
strategies, the optimal worst-case success probability is 
equal to the maximal success probability (P™ ax ) for some 
particular fixed prior distribution P. That quantum 
strategies can do no better then follows from the fact 
that P^ ax = p™ ax f or the chosen P. Hence even in this 
scenario the identity of classical and quantum optimal 
performance is preserved. 
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It is straightforward to extend the results obtained 
above to distributed computations of f(z) by any number 
of parties. In the general multi-party case, the function's 
inputs and output are encoded in the modulo 2 sum of 
to separate inputs X4 and outputs di (with all sets of Xi 
consistent with z equally probable). Note that this task 
cannot be easier than distributed computation with only 
two parties, as the m-party case can be obtained from 
the 2-party case by encoding y randomly in the modulo 
2 sum of m — 1 bits and then separating them. Hence 
the bounds on quantum and classical success probabili- 
ties obtained above must still apply to the m-party case. 
Furthermore, it is easy to see that the classical strategy 

a ^) = { u. Xl : i = l...(m-l) (26) 

achieves the same success probability as the 2-party strat- 
egy given above, and therefore reaches the quantum 
bound given by (|15|l for the optimal choice of u. 

Note that each choice of f(z) and P{z) corresponds to 
a Bell-type inequality: 

J2C(x,y)(A x B y )<K (27) 

where A x are B y are measurements with outcomes ±1, 

C(x,y) = (-iy^P(x®y), (28) 
K = 2 n (2maxP c (/) - 1). (29) 

Our results imply that there is also a Tsirelson-type in- 
equality with exactly the same coefficients constraining 
the allowed quantum states. It would be interesting 
to discover if any of these inequalities generate facets 
of the Bell-polytope of classically attainable probability 
distributions P{ab\xy) jl Iff and consequently a facet of 
the set of attainable quantum probability distributions). 
In any case, we find that the Bell-polytope and the 
(convex) Tsirelson-body have many (potentially lower- 
dimensional) faces in common which are not trivially in- 
herited from the probability or non-signalling constraints. 

This analysis also leads us to a very considerable gen- 
eralization of the nonlocal tasks described so far. Let us 
consider any Bell expression of the form 

J2M(x,y){A x B v ). (30) 

The matrix M(x, y) need not be a function of x ® y (as 
has been the case so far); indeed it need not even be 
symmetric. As long as the largest singular value of M 
corresponds to an operator \u){v\ with Hadamard basis 
vectors \u), \v) as in . then quantum resources do not 
offer a benefit over classical ones in performing the task. 
While this gives a very wide class for which quantum 
mechanics provides no benefit, it is also worth pointing 



out that not all nonlocal tasks for which this is true are 
of this type (see for example 15]). 

Although functions with a single-bit output are very 
important (as they encapsulate all decision problems), it 
would also be interesting to extend these results to func- 
tions with a multi-bit output, or with different input and 
output alphabets (e.g. ternary rather than binary). In 
both cases, it is important to consider how success will 
be measured, as in addition to the total success prob- 
ability considered above one could reasonably measure 
success by the average 'distance' between the output and 
the correct answer. For functions with a multi-bit out- 
put, where success is measured by the number of correct 
output bits, our results immediately imply that quantum 
strategies provides no advantage over classical strategies 
(because the best strategy is to optimally compute each 
output bit independently). 
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